OTL logfiles auswerten.

Psychoman86

Einen schönen guten Tag an alle,

ich möchte euch um Hilfe bitten.
Ich habe von meinem Bruder den alten Rechner bekommen und es gibt verschiedene Probleme mit diesem wie z.B.
-Firefox braucht sehr lange zum Starten, ca 30 sec.
-Wenn ich Daten, Musik, etc. von Cd, DVD auf den Rechner Kopieren will passiert nichts, es kommt nicht mal irgend eine meldung, im gegenzug kann ich aber ohne Probleme Brennen.
-Wenn ich mal etwas downloade schwankt er, bei sagen wir mal 500mb z.B. eine Zeit zwischen 3 - 4 stunden aber an anderen tagen ist es in 20 min erledigt.
-er ist auch sonnst sehr langsam.
und es gibt auch noch einige andere probleme
Ich lade euch mal die logfiles vom OTL hoch, es wäre echt nett wenn ihr mir helfen könnt und mir sagen könnt was ich machen kann damit er wieder einigermaßen vernünftig läuft.


P.S. Ich bitte euch es zu verschieben, im Falle dass ich es ins falsche Thema eingestellt habe.

Vielen Dank


Hier die Logfiles vom OTL:

OTL Extras logfile created on: 22.11.2012 19:56:30 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Dokumente und Einstellungen\Psychoman\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,00 Gb Total Physical Memory | 2,31 Gb Available Physical Memory | 76,94% Memory free
4,34 Gb Paging File | 3,34 Gb Available in Paging File | 76,88% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 127,99 Gb Total Space | 10,03 Gb Free Space | 7,84% Space Free | Partition Type: NTFS
Drive D: | 298,02 Gb Total Space | 12,43 Gb Free Space | 4,17% Space Free | Partition Type: NTFS
Drive F: | 21,06 Gb Total Space | 5,21 Gb Free Space | 24,73% Space Free | Partition Type: NTFS

Computer Name: PSYCHOMAN86 | User Name: Psychoman | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Games\Steam\Steam.exe" = C:\Games\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"C:\Programme\SFT Loader\leecher.exe" = C:\Programme\SFT Loader\leecher.exe:*:Enabled:SFT Loader -- (velocode)
"C:\Programme\Java\jre6\bin\javaw.exe" = C:\Programme\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"C:\eMule\emule.exe" = C:\eMule\emule.exe:*:Enabled:eMule
"C:\Games\Steam\SteamApps\dark_angel808\counter-strike source\hl2.exe" = C:\Games\Steam\SteamApps\dark_angel808\counter-strike source\hl2.exe:*:Enabled:Counter-Strike: Source -- ()
"C:\WINDOWS\system32\dxdiag.exe" = C:\WINDOWS\system32\dxdiag.exe:*:Enabled:Microsoft DirectX-Diagnoseprogramm -- (Microsoft Corporation)
"C:\WINDOWS\system32\dpnsvr.exe" = C:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8-Server -- (Microsoft Corporation)
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"C:\Games\Steam\SteamApps\common\amd driver updater, xp, 32 bit\Setup.exe" = C:\Games\Steam\SteamApps\common\amd driver updater, xp, 32 bit\Setup.exe:*:Enabled:AMD Driver Updater, XP, 32 bit -- (Advanced Micro Devices, Inc.)
"C:\Programme\Java\jre7\bin\javaw.exe" = C:\Programme\Java\jre7\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Oracle Corporation)
"D:\Games\Counter-Strike.Global.Offensive.STEAM.UNLOCKED-iND\csgo.exe" = D:\Games\Counter-Strike.Global.Offensive.STEAM.UNLOCKED-iND\csgo.exe:*:Enabled:csgo
"C:\Games\Steam\SteamApps\dark_angel808\Counter-Strike.Global.Offensive.STEAM.UNLOCKED-iND\csgo.exe" = C:\Games\Steam\SteamApps\dark_angel808\Counter-Strike.Global.Offensive.STEAM.UNLOCKED-iND\csgo.exe:*:Enabled:csgo
"C:\Programme\YourFileDownloader\Downloader.exe" = C:\Programme\YourFileDownloader\Downloader.exe:*:Enabled:YourFile Downloader
"C:\Programme\YourFileDownloader\YourFile.exe" = C:\Programme\YourFileDownloader\YourFile.exe:*:Enabled:YourFile Downloader
"C:\Games\Steam\SteamApps\dark_angel808\counterstrike source beta\hl2.exe" = C:\Games\Steam\SteamApps\dark_angel808\counterstrike source beta\hl2.exe:*:Enabled:hl2 -- ()


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0807E67B-DACB-1739-A87E-3046FF40BA23}" = CCC Help Chinese Traditional
"{0d1de74a-1640-45e3-8c91-51b4da6d8cef}" = Nero 9
"{0DF310E3-6C01-99DC-296F-1D021BA36C2D}" = CCC Help English
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{1E8E87B5-4531-CEE3-4791-6AD9E72076EC}" = CCC Help Danish
"{238ABEB6-42D2-4DD7-9928-DE8431519C61}" = RadLinker
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 9
"{27596347-C945-B113-EF47-169D471CEB05}" = CCC Help Turkish
"{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{359CFC0A-BEB1-440D-95BA-CF63A86DA34F}" = Nero Recode
"{3666DE18-A4CC-4E1E-8165-0D78758C2209}" = CCC Help Russian
"{368BA326-73AD-4351-84ED-3C0A7A52CC53}" = Nero Rescue Agent
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{40A64296-8E06-496B-B844-7B8EAE10302D}_is1" = Ultima VIII Pagan
"{43E39830-1826-415D-8BAE-86845787B54B}" = Nero Vision
"{479826D5-FE36-711F-8BE3-AB7B44440F66}" = ccc-utility
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{532669C6-3139-E755-B3B8-95F184EB27EB}" = CCC Help German
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{577F4DD2-ED68-690F-6328-8A8CAC8FCA75}" = CCC Help Polish
"{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress
"{62AC81F6-BDD3-4110-9D36-3E9EAAB40999}" = Nero CoverDesigner
"{637A3EC2-4299-67B2-E0D2-C25572F4D37A}" = CCC Help Thai
"{702F39B4-05FB-22F4-8426-E5FFFA330FF3}" = CCC Help Chinese Standard
"{73FB391E-E800-CC82-D9BA-EF9CB8A939F3}" = CCC Help French
"{747E2E56-A68B-15C6-BB77-31BFE0C031EF}" = CCC Help Spanish
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{7829DB6F-A066-4E40-8912-CB07887C20BB}" = Nero BurnRights
"{7A37A44B-968E-6CA3-278C-878D4D08B226}" = CCC Help Czech
"{7C0FB04E-5A40-C63D-CC1B-B6C1B60FDDA3}" = CCC Help Japanese
"{7D94796D-007E-45DE-CEAD-8E616D78E95B}" = CCC Help Dutch
"{7E7C98D1-4F44-21D4-C351-25E2367027F3}" = Catalyst Control Center
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed
"{87A91A66-1566-714D-E1BE-1F3B040E65D5}" = CCC Help Swedish
"{92F63D17-2A32-7184-B8D7-905E0E1BC2A9}" = CCC Help Hungarian
"{95CEF602-B837-0C37-F5E6-49C8F3196998}" = CCC Help Greek
"{97E1A4DE-82AB-0448-0AEA-77DC1DD9A492}" = Catalyst Control Center Localization All
"{9DFD861E-2692-873F-BA2C-E4788648D966}" = CCC Help Italian
"{9E82B934-9A25-445B-B8DF-8012808074AC}" = Nero PhotoSnap
"{A209525B-3377-43F4-B886-32F6B6E7356F}" = Nero WaveEditor
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{B1ADF008-E898-4FE2-8A1F-690D9A06ACAF}" = DolbyFiles
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B50676DC-AAE9-20DF-01A5-DABCDECD6DFC}" = Catalyst Control Center Graphics Previews Common
"{B78120A0-CF84-4366-A393-4D0A59BC546C}" = Menu Templates - Starter Kit
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C5A7CB6C-E76D-408F-BA0E-85605420FE9D}" = SoundTrax
"{C670480D-10CE-4E2E-929E-EE453EDE6BE2}" = G Data InternetSecurity 2011
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D025A639-B9C9-417D-8531-208859000AF8}" = NeroBurningROM
"{D6346B4B-FDD6-C406-06FE-0CF77F561E78}" = AMD Catalyst Install Manager
"{D9C7FB0D-B233-1B2E-E9DC-543911F6D94A}" = Catalyst Control Center InstallProxy
"{D9DCF92E-72EB-412D-AC71-3B01276E5F8B}" = Nero ShowTime
"{DD9F821E-7B8D-210F-A4AE-47C60870DEBE}" = CCC Help Norwegian
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E498385E-1C51-459A-B45F-1721E37AA1A0}" = Movie Templates - Starter Kit
"{E6F42010-AA5A-B862-9620-8CBD23ACDED4}" = CCC Help Portuguese
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{EAAE7669-947C-26DD-563D-863B63FFC1EA}" = CCC Help Finnish
"{F296A4CD-54A2-1EEE-CE14-8F88A1D97083}" = CCC Help Korean
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool
"5513-1208-7298-9440" = JDownloader 0.9
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AutoGK" = Auto Gordian Knot 2.55
"AviSynth" = AviSynth 2.5
"FileZilla Client" = FileZilla Client 3.5.3
"Foxit Reader_is1" = Foxit Reader 5.1
"Free YouTube Download_is1" = Free YouTube Download version 3.1.25.423
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie8" = Windows Internet Explorer 8
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 8.6.0
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Mozilla Firefox 16.0.2 (x86 de)" = Mozilla Firefox 16.0.2 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NVIDIA Drivers" = NVIDIA Drivers
"Steam App 240" = Counter-Strike: Source
"Steam App 260" = Counter-Strike: Source Beta
"VLC media player" = VLC media player 2.0.1
"VobSub" = VobSub v2.23 (Remove Only)
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR 4.11 (32-Bit)
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XviD MPEG4 Video Codec" = XviD MPEG4 Video Codec (remove only)

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 14.08.2012 14:20:23 | Computer Name = PSYCHOMAN86 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung FreeYTVDownloader.exe, Version 3.1.25.423,
Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 17.08.2012 14:37:53 | Computer Name = PSYCHOMAN86 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung firefox.exe, Version 14.0.1.4577, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 17.08.2012 14:57:09 | Computer Name = PSYCHOMAN86 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung FreeYTVDownloader.exe, Version 3.1.25.423,
Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 17.08.2012 14:57:37 | Computer Name = PSYCHOMAN86 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung Nero.exe, Version 9.4.26.100, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 17.08.2012 14:57:38 | Computer Name = PSYCHOMAN86 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung Nero.exe, Version 9.4.26.100, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 18.08.2012 08:33:19 | Computer Name = PSYCHOMAN86 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung vlc.exe, Version 2.0.2.0, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 18.08.2012 09:02:12 | Computer Name = PSYCHOMAN86 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung firefox.exe, Version 14.0.1.4577, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 19.08.2012 06:33:29 | Computer Name = PSYCHOMAN86 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung WinRAR.exe, Version 4.11.0.0, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 19.08.2012 13:26:54 | Computer Name = PSYCHOMAN86 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung Nero.exe, Version 9.4.26.100, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 20.08.2012 08:43:14 | Computer Name = PSYCHOMAN86 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung firefox.exe, Version 14.0.1.4577, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

[ System Events ]
Error - 13.11.2012 14:18:01 | Computer Name = PSYCHOMAN86 | Source = sr | ID = 1
Description = Beim Verarbeiten der Datei "Dc128.lnk" auf Volume "HarddiskVolume2"
ist im Wiederherstellungsfilter der unerwartete Fehler "0xC000007F" aufgetreten.
Die Volumeüberwachung wurde angehalten.

Error - 13.11.2012 16:35:12 | Computer Name = PSYCHOMAN86 | Source = DCOM | ID = 10010
Description = Der Server "{BCB3CC02-761B-4C74-8B04-891A31034D19}" konnte innerhalb
des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error - 14.11.2012 17:16:51 | Computer Name = PSYCHOMAN86 | Source = DCOM | ID = 10010
Description = Der Server "{BCB3CC02-761B-4C74-8B04-891A31034D19}" konnte innerhalb
des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error - 14.11.2012 20:17:28 | Computer Name = PSYCHOMAN86 | Source = sr | ID = 1
Description = Beim Verarbeiten der Datei "System_Xaml_x86.dll" auf Volume "HarddiskVolume2"
ist im Wiederherstellungsfilter der unerwartete Fehler "0xC000007F" aufgetreten.
Die Volumeüberwachung wurde angehalten.

Error - 15.11.2012 11:42:24 | Computer Name = PSYCHOMAN86 | Source = Service Control Manager | ID = 7031
Description = Der Dienst "G Data AntiVirus Proxy" wurde unerwartet beendet. Dies
ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden
durchgeführt: Starten Sie den Dienst neu..

Error - 16.11.2012 09:58:34 | Computer Name = PSYCHOMAN86 | Source = DCOM | ID = 10010
Description = Der Server "{BCB3CC02-761B-4C74-8B04-891A31034D19}" konnte innerhalb
des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error - 18.11.2012 09:09:00 | Computer Name = PSYCHOMAN86 | Source = DCOM | ID = 10010
Description = Der Server "{BCB3CC02-761B-4C74-8B04-891A31034D19}" konnte innerhalb
des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error - 19.11.2012 13:00:27 | Computer Name = PSYCHOMAN86 | Source = DCOM | ID = 10010
Description = Der Server "{BCB3CC02-761B-4C74-8B04-891A31034D19}" konnte innerhalb
des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error - 20.11.2012 08:32:59 | Computer Name = PSYCHOMAN86 | Source = DCOM | ID = 10010
Description = Der Server "{BCB3CC02-761B-4C74-8B04-891A31034D19}" konnte innerhalb
des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error - 21.11.2012 07:19:19 | Computer Name = PSYCHOMAN86 | Source = DCOM | ID = 10010
Description = Der Server "{BCB3CC02-761B-4C74-8B04-891A31034D19}" konnte innerhalb
des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


< End of report >





OTL logfile created on: 22.11.2012 19:56:30 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Dokumente und Einstellungen\Psychoman\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,00 Gb Total Physical Memory | 2,31 Gb Available Physical Memory | 76,94% Memory free
4,34 Gb Paging File | 3,34 Gb Available in Paging File | 76,88% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 127,99 Gb Total Space | 10,03 Gb Free Space | 7,84% Space Free | Partition Type: NTFS
Drive D: | 298,02 Gb Total Space | 12,43 Gb Free Space | 4,17% Space Free | Partition Type: NTFS
Drive F: | 21,06 Gb Total Space | 5,21 Gb Free Space | 24,73% Space Free | Partition Type: NTFS

Computer Name: PSYCHOMAN86 | User Name: Psychoman | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - File not found --
PRC - [2012.10.28 00:54:56 | 000,917,984 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
PRC - [2012.09.24 22:12:59 | 000,161,768 | ---- | M] (Oracle Corporation) -- C:\Programme\Java\jre7\bin\jqs.exe
PRC - [2012.07.03 08:04:54 | 000,252,848 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
PRC - [2010.04.22 12:59:36 | 000,339,016 | ---- | M] (G Data Software AG) -- C:\Programme\Gemeinsame Dateien\G Data\GDScan\GDScan.exe
PRC - [2010.04.07 10:30:22 | 001,146,440 | ---- | M] (G Data Software AG) -- C:\Programme\Gemeinsame Dateien\G Data\AVKProxy\AVKProxy.exe
PRC - [2010.03.31 15:06:48 | 000,963,144 | ---- | M] (G Data Software AG) -- C:\Programme\G Data\InternetSecurity\AVKTray\AVKTray.exe
PRC - [2010.03.31 15:06:48 | 000,410,696 | ---- | M] (G Data Software AG) -- C:\Programme\G Data\InternetSecurity\AVK\AVKService.exe
PRC - [2010.03.15 10:24:00 | 001,279,816 | ---- | M] (G Data Software AG) -- C:\Programme\G Data\InternetSecurity\AVK\AVKWCtl.exe
PRC - [2009.09.23 12:38:18 | 000,935,208 | ---- | M] (Nero AG) -- C:\Programme\Gemeinsame Dateien\Nero\Nero BackItUp 4\NBService.exe
PRC - [2008.04.14 03:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2005.08.17 11:39:58 | 000,090,112 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE


========== Modules (No Company Name) ==========

MOD - [2012.11.15 21:34:49 | 011,817,472 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\b809681da85a58046cb39f268b6697ad\System.Web.ni.dll
MOD - [2012.11.15 21:32:45 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\41cac4885974d07de06f0b4fec9883f0\System.Configuration.ni.dll
MOD - [2012.11.15 21:31:20 | 000,025,600 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\b5af2249e2d550f2752176a75c7a7656\Accessibility.ni.dll
MOD - [2012.11.15 01:12:10 | 005,450,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\d35b50eb6bb7b1bfb6592419d9feba47\System.Xml.ni.dll
MOD - [2012.11.15 01:11:59 | 012,433,920 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6585a5fcaaa1b49b9a1bd9ca5c5c306e\System.Windows.Forms.ni.dll
MOD - [2012.11.15 01:11:46 | 001,592,320 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\da4bcb702feb770ce40cf1371b0c4d02\System.Drawing.ni.dll
MOD - [2012.11.15 01:09:56 | 007,977,472 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\90ad0c96693527ae685ff40019bb33b0\System.ni.dll
MOD - [2012.11.15 01:09:33 | 011,492,352 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\3add69b075f3da012fb97ce00cd795c0\mscorlib.ni.dll
MOD - [2012.11.15 01:08:08 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
MOD - [2012.10.28 00:54:55 | 002,295,264 | ---- | M] () -- C:\Programme\Mozilla Firefox\mozjs.dll
MOD - [2012.10.08 19:24:37 | 009,814,968 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll
MOD - [2012.07.03 22:55:30 | 000,270,336 | ---- | M] () -- C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
MOD - [2012.02.17 19:55:35 | 000,166,912 | ---- | M] () -- C:\Programme\WinRAR\RarExt.dll
MOD - [2012.01.08 14:41:12 | 000,093,696 | ---- | M] () -- C:\FileZilla FTP Client\fzshellext.dll
MOD - [2010.03.16 11:22:12 | 000,014,848 | ---- | M] () -- C:\Programme\ATI Technologies\ATI.ACE\Core-Static\AxInterop.WBOCXLib.dll
MOD - [2008.04.14 03:22:16 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2005.04.27 03:50:00 | 000,557,056 | --S- | M] () -- C:\WINDOWS\system32\RadMnu.dll
MOD - [2005.04.27 03:49:30 | 000,200,704 | --S- | M] () -- C:\WINDOWS\system32\RadExe.dll


========== Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2012.10.28 00:54:55 | 000,115,168 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.10.08 19:24:49 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.09.24 22:12:59 | 000,161,768 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Programme\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2011.03.16 09:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010.04.22 12:59:36 | 000,339,016 | ---- | M] (G Data Software AG) [On_Demand | Running] -- C:\Programme\Gemeinsame Dateien\G Data\GDScan\GDScan.exe -- (GDScan)
SRV - [2010.04.07 10:30:22 | 001,146,440 | ---- | M] (G Data Software AG) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\G Data\AVKProxy\AVKProxy.exe -- (AVKProxy)
SRV - [2010.03.31 15:06:48 | 000,410,696 | ---- | M] (G Data Software AG) [Auto | Running] -- C:\Programme\G Data\InternetSecurity\AVK\AVKService.exe -- (AVKService)
SRV - [2010.03.15 10:24:00 | 001,279,816 | ---- | M] (G Data Software AG) [Auto | Running] -- C:\Programme\G Data\InternetSecurity\AVK\AVKWCtl.exe -- (AVKWCtl)
SRV - [2009.09.23 12:38:18 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2005.04.27 03:49:02 | 000,102,400 | --S- | M] () [Auto | Stopped] -- C:\WINDOWS\system32\RadClock.exe -- (RadClock)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOKUME~1\PSYCHO~1\LOKALE~1\Temp\cpuz130\cpuz_x32.sys -- (cpuz130)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2012.07.07 17:52:39 | 000,068,976 | ---- | M] (G Data Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\GRD.sys -- (GRD)
DRV - [2012.07.07 17:09:12 | 000,051,784 | ---- | M] (G DATA Software AG) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\GDTdiIcpt.sys -- (GDTdiInterceptor)
DRV - [2012.07.07 17:09:05 | 000,038,600 | ---- | M] (G Data Software AG) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HookCentre.sys -- (HookCentre)
DRV - [2012.07.07 17:08:38 | 000,061,512 | ---- | M] (G Data Software AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\MiniIcpt.sys -- (GDMnIcpt)
DRV - [2012.07.07 17:08:38 | 000,033,480 | ---- | M] (G Data Software AG) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\GDBehave.sys -- (GDBehave)
DRV - [2012.07.04 07:54:32 | 007,874,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2012.05.14 07:12:12 | 000,103,040 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AtihdXP3.sys -- (AtiHDAudioService)
DRV - [2008.08.06 08:19:05 | 000,093,696 | R--- | M] (ATI Research Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2007.04.16 20:46:00 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)
DRV - [2005.08.19 10:31:52 | 003,644,800 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM)
DRV - [2005.08.18 10:52:06 | 000,093,568 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\nvata.sys -- (nvata)
DRV - [2005.04.27 03:46:56 | 000,020,428 | --S- | M] (ChrisW) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RadProbe.sys -- (RadProbe)
DRV - [2005.04.05 20:22:30 | 000,012,928 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2005.04.05 20:22:28 | 000,033,536 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2481020
IE - HKCU\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{7168EABC-4151-4BD3-AAB5-107E4F37C7A3}: "URL" = hxxp://start.funmoods.com/results.php?f=4&a=ddrnw&q={searchTerms}
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2481020
IE - HKCU\..\SearchScopes\{B0D0FB57-25FF-48CA-ACAA-BD39A80C1790}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=EC1E9953-38E7-4CC3-B8BF-F6FA9B8F90D8&apn_sauid=7A0374F5-C980-498B-9E03-507821C8F8BA
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..CT2481020.browser.search.defaultthis.engineName: true
FF - prefs.js..browser.search.defaultengine: "Google"
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.startup.homepage: "https://www.google.de/"
FF - prefs.js..extensions.enabledAddons: YoutubeToMp3@wontube.com:1.0.2
FF - prefs.js..extensions.enabledAddons: {1de0de3c-0b5c-4f67-90c6-689623894991}:0.3
FF - prefs.js..extensions.enabledAddons: {4DC70064-89E2-4a55-8FC6-E8CDEAE3618C}:0.7.7
FF - prefs.js..keyword.URL: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481020&SearchSource=2&q="
FF - prefs.js..network.proxy.type: 0


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Programme\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012.10.28 00:54:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.2\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins

[2012.04.09 15:49:01 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\Mozilla\Extensions
[2012.11.21 23:08:06 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\Mozilla\Firefox\Profiles\g56m5apv.default\extensions
[2012.04.21 12:11:40 | 000,000,000 | ---D | M] (Funmoods.com) -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\Mozilla\Firefox\Profiles\g56m5apv.default\extensions\ffxtlbr@funmoods.com
[2012.06.18 16:26:56 | 000,124,481 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\Mozilla\Firefox\Profiles\g56m5apv.default\extensions\YoutubeToMp3@wontube.com.xpi
[2012.04.11 13:14:57 | 000,005,739 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\Mozilla\Firefox\Profiles\g56m5apv.default\extensions\{1de0de3c-0b5c-4f67-90c6-689623894991}.xpi
[2012.04.11 13:14:57 | 000,013,345 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\Mozilla\Firefox\Profiles\g56m5apv.default\extensions\{4DC70064-89E2-4a55-8FC6-E8CDEAE3618C}.xpi
[2012.11.20 23:06:25 | 000,035,785 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\Mozilla\Firefox\Profiles\g56m5apv.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
[2012.11.21 23:08:06 | 000,804,737 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\Mozilla\Firefox\Profiles\g56m5apv.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2012.09.08 11:53:31 | 000,002,299 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\Mozilla\Firefox\Profiles\g56m5apv.default\searchplugins\askcom.xml
[2012.11.05 18:01:24 | 000,000,915 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\Mozilla\Firefox\Profiles\g56m5apv.default\searchplugins\conduit.xml
[2012.04.21 12:11:38 | 000,001,799 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\Mozilla\Firefox\Profiles\g56m5apv.default\searchplugins\funmoods.xml
[2012.10.28 00:54:36 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.10.28 00:54:36 | 000,000,000 | ---D | M] (G Data WebFilter) -- C:\Programme\Mozilla Firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE}
[2012.04.09 17:58:38 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2012.10.28 00:54:56 | 000,261,600 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2012.03.13 06:23:34 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.08.28 18:46:54 | 000,002,465 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012.03.13 06:23:34 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012.03.13 06:23:34 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.03.13 06:23:34 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.03.13 06:23:34 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml

O1 HOSTS File: ([2001.08.18 13:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Programme\G Data\InternetSecurity\Webfilter\AvkWebIE.dll (G Data Software AG)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Programme\G Data\InternetSecurity\Webfilter\AvkWebIE.dll (G Data Software AG)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [G Data AntiVirus Tray Application] C:\Programme\G Data\InternetSecurity\AVKTray\AVKTray.exe (G Data Software AG)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKCU..\Run: [Steam] C:\Games\Steam\steam.exe (Valve Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Free YouTube Download - C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\DVDVideoSoftIEHelpers\freeytvdownloader.htm ()
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FD03BB35-EB96-4074-BFC1-A49AF85405C2}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp
O28 - HKLM ShellExecuteHooks: {35B2861B-2B26-4691-9FF0-09083722C736} - C:\WINDOWS\system32\RadExe.dll ()
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012.04.09 15:35:23 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2012.10.31 14:34:45 | 000,000,000 | ---D | M] - C:\AutoGK -- [ NTFS ]
O33 - MountPoints2\{6c81be84-e600-11e1-884c-0015f2f37627}\Shell - "" = AutoRun
O33 - MountPoints2\{6c81be84-e600-11e1-884c-0015f2f37627}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{6c81be84-e600-11e1-884c-0015f2f37627}\Shell\AutoRun\command - "" = E:\Startme.exe
O33 - MountPoints2\{b078c019-c78e-11e1-881a-0015f2f37627}\Shell - "" = AutoRun
O33 - MountPoints2\{b078c019-c78e-11e1-881a-0015f2f37627}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{b078c019-c78e-11e1-881a-0015f2f37627}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2012.11.22 19:45:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Psychoman\Desktop\OTL
[2012.11.22 18:15:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA
[2012.11.06 20:15:13 | 000,962,560 | ---- | C] (East Wind Software) -- C:\WINDOWS\System32\advdaudio.ocx
[2012.11.06 20:15:13 | 000,634,880 | ---- | C] (Online Media Technologies Ltd.) -- C:\WINDOWS\System32\NCTAudioEditor2.dll
[2012.11.06 20:15:12 | 000,522,752 | ---- | C] (Online Media Technologies Ltd.) -- C:\WINDOWS\System32\NCTAudioTransform2.dll
[2012.11.06 20:15:12 | 000,467,968 | ---- | C] (Online Media Technologies Ltd.) -- C:\WINDOWS\System32\NCTAudioRecord2.dll
[2012.11.06 20:15:12 | 000,467,456 | ---- | C] (Online Media Technologies Ltd.) -- C:\WINDOWS\System32\NCTAudioPlayer2.dll
[2012.11.06 20:15:11 | 000,966,144 | ---- | C] (Online Media Technologies Ltd.) -- C:\WINDOWS\System32\NCTAudioInformation2.dll
[2012.11.06 20:15:11 | 000,877,568 | ---- | C] (NCT Company Ltd.) -- C:\WINDOWS\System32\NCTAudioFile2.dll
[2012.11.06 20:15:09 | 000,413,696 | ---- | C] (Gabest) -- C:\WINDOWS\System32\flvsplitter.ax
[2012.11.06 20:15:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\concept design
[2012.11.06 20:14:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Franzis
[2012.11.06 20:14:20 | 000,000,000 | ---D | C] -- C:\Programme\Franzis
[2012.11.06 20:02:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\VideoLAN
[2012.11.05 18:00:31 | 000,000,000 | ---D | C] -- C:\Programme\Conduit
[2012.11.05 18:00:24 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Psychoman\Lokale Einstellungen\Anwendungsdaten\Temp
[2012.11.05 18:00:24 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Psychoman\Lokale Einstellungen\Anwendungsdaten\Conduit
[2012.11.01 14:35:20 | 014,294,360 | ---- | C] (DT Soft Ltd) -- C:\Dokumente und Einstellungen\Psychoman\Desktop\DTLite4454-0316.exe
[2012.11.01 14:34:55 | 001,530,776 | ---- | C] (DT Soft Ltd.) -- C:\Dokumente und Einstellungen\Psychoman\Desktop\daemon406-x86.exe
[2012.10.31 14:57:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\Media Player Classic
[2012.10.31 14:34:42 | 000,000,000 | ---D | C] -- C:\Programme\XviD
[2012.10.31 14:34:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\XviD
[2012.10.31 14:34:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Psychoman\Startmenü\Programme\AviSynth 2.5
[2012.10.31 14:34:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\AviSynth 2.5
[2012.10.31 14:33:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Psychoman\Startmenü\Programme\VobSub
[2012.10.31 14:32:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\AutoGK
[2012.10.31 14:32:46 | 000,000,000 | ---D | C] -- C:\AutoGK
[2012.10.28 16:08:26 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Slysoft AIO
[2012.10.28 00:54:31 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012.11.22 19:23:00 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012.11.22 18:14:32 | 000,050,176 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.11.22 18:00:39 | 000,000,308 | ---- | M] () -- C:\WINDOWS\tasks\YourFile Update.job
[2012.11.22 18:00:27 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.11.22 17:47:14 | 105,906,176 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part01.rar
[2012.11.22 17:15:29 | 105,906,176 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part02.rar
[2012.11.22 16:26:22 | 105,906,176 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part03.rar
[2012.11.22 15:52:26 | 105,906,176 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part04.rar
[2012.11.22 14:42:08 | 105,906,176 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part05.rar
[2012.11.22 13:55:20 | 105,906,176 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part06.rar
[2012.11.22 12:44:10 | 105,906,176 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part07.rar
[2012.11.22 12:29:39 | 000,000,059 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\C1neon.com - Downloads, Streams und Community - Cineon.URL
[2012.11.22 05:31:58 | 105,906,176 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part08.rar
[2012.11.22 04:55:32 | 105,906,176 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part09.rar
[2012.11.22 04:10:30 | 105,906,176 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part10.rar
[2012.11.22 03:28:16 | 105,906,176 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part12.rar
[2012.11.22 02:49:46 | 105,906,176 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part13.rar
[2012.11.22 02:22:45 | 088,752,463 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part14.rar
[2012.11.21 17:06:08 | 000,000,117 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\DDL-Warez Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA Download.URL
[2012.11.18 23:34:07 | 000,058,013 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\27085810Qpe.jpg
[2012.11.18 23:33:44 | 000,050,959 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\23184917uTk.jpg
[2012.11.18 23:33:37 | 000,042,313 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\23184916aVQ.jpg
[2012.11.15 16:05:32 | 000,095,072 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.11.15 01:17:36 | 000,492,308 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2012.11.15 01:17:36 | 000,472,866 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.11.15 01:17:36 | 000,090,952 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2012.11.15 01:17:36 | 000,075,960 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.11.15 01:09:23 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012.11.14 22:13:55 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.11.06 20:02:36 | 000,000,691 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\VLC media player.lnk
[2012.11.05 18:01:11 | 000,000,009 | ---- | M] () -- C:\END
[2012.11.02 14:29:23 | 000,000,561 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\AutoGK.ini
[2012.11.01 14:36:02 | 014,294,360 | ---- | M] (DT Soft Ltd) -- C:\Dokumente und Einstellungen\Psychoman\Desktop\DTLite4454-0316.exe
[2012.11.01 14:34:55 | 001,530,776 | ---- | M] (DT Soft Ltd.) -- C:\Dokumente und Einstellungen\Psychoman\Desktop\daemon406-x86.exe
[2012.10.31 12:27:32 | 000,001,540 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Ultima VIII Pagan.lnk
[2012.10.28 16:46:00 | 043,647,273 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\541s41s41s4.rar
[2012.10.28 16:07:46 | 046,732,994 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Slysoft AIO_PW.is_WorldWideWeb.rar
[2012.10.28 16:04:06 | 012,341,641 | ---- | M] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\AutoGordianKnot.2.55.Setup.exe
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.11.22 17:16:55 | 105,906,176 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part01.rar
[2012.11.22 16:45:11 | 105,906,176 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part02.rar
[2012.11.22 15:56:03 | 105,906,176 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part03.rar
[2012.11.22 15:21:59 | 105,906,176 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part04.rar
[2012.11.22 13:58:23 | 105,906,176 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part05.rar
[2012.11.22 13:11:34 | 105,906,176 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part06.rar
[2012.11.22 12:10:30 | 105,906,176 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part07.rar
[2012.11.22 05:06:43 | 105,906,176 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part08.rar
[2012.11.22 04:30:18 | 105,906,176 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part09.rar
[2012.11.22 03:45:16 | 105,906,176 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part10.rar
[2012.11.22 03:03:02 | 105,906,176 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part12.rar
[2012.11.22 02:24:32 | 105,906,176 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part13.rar
[2012.11.22 02:01:36 | 088,752,463 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA.part14.rar
[2012.11.21 17:06:08 | 000,000,117 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\DDL-Warez Unforgettable.German.1996.AC3.DVDRiP.XviD.iNTERNAL-CiA Download.URL
[2012.11.20 05:17:18 | 000,000,059 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\C1neon.com - Downloads, Streams und Community - Cineon.URL
[2012.11.19 17:58:15 | 000,058,013 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\27085810Qpe.jpg
[2012.11.19 17:58:15 | 000,050,959 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\23184917uTk.jpg
[2012.11.19 17:58:15 | 000,042,313 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\23184916aVQ.jpg
[2012.11.06 20:15:13 | 000,110,080 | ---- | C] () -- C:\WINDOWS\System32\advd.dll
[2012.11.06 20:15:13 | 000,023,040 | ---- | C] () -- C:\WINDOWS\System32\auth.dll
[2012.11.06 20:15:11 | 000,511,488 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2012.11.06 20:02:36 | 000,000,691 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\VLC media player.lnk
[2012.11.05 18:01:10 | 000,000,009 | ---- | C] () -- C:\END
[2012.10.31 19:30:33 | 000,000,561 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\AutoGK.ini
[2012.10.28 16:03:42 | 012,341,641 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\AutoGordianKnot.2.55.Setup.exe
[2012.10.28 15:54:42 | 043,647,273 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\541s41s41s4.rar
[2012.10.28 15:50:06 | 046,732,994 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Desktop\Slysoft AIO_PW.is_WorldWideWeb.rar
[2012.10.14 16:04:12 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2012.10.14 16:04:11 | 000,618,823 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2012.10.14 16:04:11 | 000,000,003 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2012.10.14 16:01:36 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012.10.06 12:06:25 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2012.08.31 17:10:02 | 003,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativvaxx.dat
[2012.08.26 12:32:06 | 000,350,720 | ---- | C] () -- C:\WINDOWS\TCUnInst.exe
[2012.07.01 11:19:43 | 000,000,032 | ---- | C] () -- C:\WINDOWS\Menu.INI
[2012.04.15 20:40:18 | 004,078,592 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll
[2012.04.15 20:40:18 | 000,650,752 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2012.04.15 20:40:18 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2012.04.15 20:40:18 | 000,216,064 | ---- | C] ( ) -- C:\WINDOWS\System32\lagarith.dll
[2012.04.15 20:40:16 | 000,079,360 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2012.04.15 20:28:32 | 000,000,148 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\default.rss
[2012.04.15 20:28:15 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2012.04.15 18:13:47 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\chrtmp
[2012.04.15 18:13:45 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\Application Updater.exe
[2012.04.11 19:29:47 | 000,050,176 | ---- | C] () -- C:\Dokumente und Einstellungen\Psychoman\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.04.09 18:33:55 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2012.04.09 18:32:14 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2012.04.09 16:59:07 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.04.09 16:09:13 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012.04.09 16:08:05 | 000,095,072 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.04.09 15:53:12 | 000,156,672 | R--- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll
[2012.04.09 15:42:16 | 000,006,016 | ---- | C] () -- C:\WINDOWS\System32\drivers\ALLOW-IO.SYS
[2012.04.09 15:36:52 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012.04.09 15:32:31 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

========== ZeroAccess Check ==========

[2012.04.09 17:34:09 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\System32\shdocvw.dll -- [2011.12.19 09:53:33 | 001,510,400 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\System32\wbem\fastprox.dll -- [2009.02.09 11:51:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\System32\wbem\wbemess.dll -- [2008.04.14 03:22:32 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2012.10.04 13:06:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Acronis
[2012.09.08 11:43:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ask
[2012.07.07 17:25:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CMUV
[2012.07.21 17:49:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Lite
[2012.07.07 17:24:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DBC2F6FD-3140-41E0-A2A1-D6BAB77D5E21__F893F7CA-8278-41DF-A76F-CAF0437A90CD__
[2012.07.14 13:18:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\G Data
[2012.11.06 20:39:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\concept design
[2012.07.07 17:24:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\DBC2F6FD-3140-41E0-A2A1-D6BAB77D5E21__F893F7CA-8278-41DF-A76F-CAF0437A90CD__
[2012.05.01 16:50:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\DVDVideoSoft
[2012.05.01 16:50:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\DVDVideoSoftIEHelpers
[2012.10.06 12:12:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\FileZilla
[2012.06.24 11:57:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\Foxit Software
[2012.08.19 17:47:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\Oracle
[2012.10.06 11:45:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Psychoman\Anwendungsdaten\YourFileDownloader

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 971 bytes -> C:\Dokumente und Einstellungen\All Users\Desktop:$SS_DESCRIPTOR_LBP6VPVFLVGVVFB84LTSUTB92PFNPC7BPV4XFJDMNGTFB5V5NBJ5TBBJMT9Y0N96GMP3V0GRUEF39X8XHH0TCFUL44FTBX4MLSWPBXRTF6VEKLFEJK35PNX0W HNGT9LSVEVF1VTVVTVXVVD

< End of report >